Economical quantum cloning in any dimension 
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The possibihty of cloning a d-dimensional quantum system without an ancilla is explored, extend- 
ing on the economical phase-covariant cloning machine found in [Phys. Rev. A 60, 2764 (1999)] for 
qubits. We prove the impossibility of constructing an economical version of the optimal universal 
cloning machine in any dimension. We also show, using an ansatz on the generic form of cloning 
machines, that the d-dimensional phase-covariant doner, which optimally clones all uniform super- 
positions, can be realized economically only in dimension d = 2. The used ansatz is supported by 
numerical evidence up to d = 7. An economical phase-covariant doner can nevertheless be con- 
structed for d > 2, albeit with a lower fidelity than that of the optimal doner requiring an ancilla. 
Finally, using again an ansatz on cloning machines, we show that an economical version of the 
Fourier-covariant doner, which optimally clones the computational basis and its Fourier transform, 
is also possible only in dimension d = 2. 

PACS numbers: 03.67.-a 



I. INTRODUCTION 

During the last decade, many promising applications of 
ideas developed within the framework of quantum infor- 
mation theory, such as quantum cryptography, quantum 
computing, quantum cloning, and quantum teleportation 
were implemented experimentally |l','5,'3,'3,'5l|. Although 
it is not certain whether these spectacular progresses will 
lead to a practical quantum computer 0] because of the 
difficulties related to decoherence, quantum cryptogra- 
phyis already a well established and mature technology 
m, l3 ■ Traditionally, quantum key distribution is imple- 
mented with two-level quantum systems, usually referred 
to as qubits. The security of the quantum key distri- 
bution (QKD) protocols such as the BB84 protocol 
is guaranteed by the no- cloning theorem [lol |. which 
states that the perfect copying (or cloning) of a set of 
states that contains at least two non-orthogonal states 
is impossible. It is, however, possible to realize an ap- 
proximate quantum cloning, a concept introduced in a 
seminal paper by Buzek and Hillery where a uni- 
versal (or state-independent) and symmetric one-to-two 
cloning transformation was introduced for qubits. 

The cloning machines can be used as very efficient 
eavesdropping attacks on the QKD protocols. In this 
context, it is important to study machines which opti- 
mally clone a particular subset of states of the Hilbert 
space, for example the Fourier-covariant cloning ma- 
chine, which optimally copies two mutually unbiased 
bases under a Fourier transform |l2j . or the phase- 
covariant cloning machine, which optimally clones all bal- 
anced superpositions of the computational basis states 
Is, 14, 15, 16,lLi8,ia JOJ- In particular, the optimal 
Fourier-covariant doner in two dimensions, is known to 
provide the most dangerous eavesdropping strategy for 
the BB84 quantum cryptographic protocol , while the 
phase-covariant and universal doners resp ectively play 
the same role relatively to the Ekert [2l| and 6-states 



|2a,|23| protocols. 

In the present paper, we shall concentrate on the one- 
to-two cloning machines, which produces two copies. In 
an eavesdropping scenario, one copy is sent to the legit- 
imate receiver while the other one is kept by the eaves- 
dropper. The 1 — + 2 cloning transformation for qudits 
can typically be expressed as a unitary operation on 
the Hilbert space of three qudits — the input, a blank 
copy, and an ancilla. The presence of ancilla significantly 
affects the experimental implementation of the cloning 
operation, which becomes more complicated and sensi- 
tive to decoherence as it has been shown in a recent 
NMR realization of optimal universal qubit doner 0]. 
These negative effects, which may drastically reduce the 
achieved cloning fidelity, may significantly be suppressed 
if an "economical" approach is followed, which avoids the 
ancilla. The cloning is then realized as a unitary opera- 
tion on two qudits only: the input and the blank copy. 
This is obviously much simpler to implement because it 
requires less qudits and two-qudit gates, and it requires 
to control the entanglement of a pair of qudits only. It 
is thus likely to be much less sensitive to noise and deco- 
herence than its three qudit counterpart, a fact that was 
recently confirmed experimentally |2^]. To date, the only 
1^2 cloning machine for which an economical realiza- 
tion is known is the phase-covariant qubit doner due to 
Niu and Griffiths 13, 25, 26]. 

The (asymmetric) phase-covariant qubit cloning ma- 
chine [13] works as follows. During the process, the qubit 
to be cloned, initially in state \'4>)b, is coupled to an- 
other qubit which become the second copy and is initially 
prepared in state \Q)e (the labels B and E refer to the 
tradition in quantum cryptography according to which 
the receiver of the key is called Bob and the eavesdrop- 
per Eve). Then, the state \^)b\Q)e undergoes a unitary 
transformation Ube such that 



Ube\Q)b\Q)i 



|0>B|0>i 
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Ube\1)b\0)e = cosa|l)B|0)£; + sina|0)B|l)E (1) 

It can be shown that when the input qubit is in an equa- 
torial state, 



1 



J4'\ 



1) 



(2) 



the fidehties of Bob's and Eve's clones give 



Fb = {i^lB^TEipMB = 

Fe = {tP\ETrB{pM)E = 



1 + COS a 



1 + sin a 



(3) 



where p = \<^be){'^be\ and \<^be = UbeItP) b\0) e These 
fidelities do not depend on the azimuthal angle 0, so that 
these doners are called phase-covariant. The special case 
a = 7r/4 corresponds to the symmetric phase-covariant 
doner, which provides two clones of equal fidelity Fb — 
Fe = {2 + ^/2)/4 w 0.85. 

It is worth emphasizing that, excepted for the two 
qubits which are used to carry the two copies, this trans- 
formation does not require any extra qubit (ancilla), and 
is thus an economical cloning process. In a recent paper, 
a general, necessary and sufficient, criterion was derived 
in order to characterize the reducibility of 3-qubit doners 
to 2-qubit doners, and it was concluded that the phase- 
covariant doner is the only doner in dimension d — 2 
that admits an economical realization "2^. The goal of 
the present paper is to further extend this study, and 
to investigate whether a two-qudit realization exists also 
for d-dimensional cloning machines. More generally, we 
aim at elucidating the connections that exist between the 
doners with or without ancillas. We prove a series of no- 
go theorems for economical one-to-two cloning. In par- 
ticular, we show that, without an ancilla, it is impossible 
to realize the (deterministic) optimal universal cloning 
machine in any dimension d (Section II), and that an eco- 
nomical implementation of optimal phase-covariant don- 
ers does not exist for dimensions d > 2 (Section III). This 
latter result relies on some ansatz on the cloning trans- 
formation, which is made very plausible by a numerical 
check up to c? = 7. As a side-result, we also consider the 
best economical phase-covariant doner in d dimensions, 
which achieves a high fidelity although it does not per- 
form as well as the optimal phase-covariant doner with 
an ancilla (Section IV). Moreover, we provide a strong 
evidence that the optimal cloning of a pair of mutually 
unbiased bases, or Fourier-covariant cloning, requires an 
ancilla if c? > 2 (Section V). All these results strongly sug- 
gest that the Niu-Griffiths phase-covariant qubit doner 
which docs not require an ancilla, is quite unique 
among the 1 — > 2 cloning machines. 



II. UNIVERSAL CLONING MACHINES 

Let us begin by introducing an isomorphism between 
completely positive maps S and positive semidcfinitc op- 
erators 5 > on the tensor product of input and output 



Hilbert spaces, T^in^T^out 
entangled state on Ti"^, 



[2^ |23 | . Consider a maximally 



Vd 



(4) 



where d =^ dim(7iin) The map S is applied to the sub- 
system 2, while nothing happens with subsystem 1. The 
resulting (generally mixed) quantum state is isomorphic 
to S and reads 



5 = Ii(»52(d|$+)($+|). 



(5) 



The prefactor d is introduced for normalization purposes. 
A trace preserving map satisfies the condition 



Trout [^] = li: 



(6) 



The CP map Pout 
S as follows 1291. 



S{pin) can be expressed in terms of 



Pout = Trin[pJi (Xl lout 5], 



(7) 



where T denotes the transposition in the computational 
basis. 

Let us now consider that S describes the 1^2 cloning 
transformation of qudits. The output Hilbert space is en- 
dowed with tensor product structure, Hout = 'Hb ^Ti-E, 
where the subscripts B and E label the two clones (in the 
framework of quantum cryptography, they label the au- 
thorized user's (Bob's) copy and the spy's (Eve's) copy). 
For each particular input state \'ip)^ we can calculate the 
fidelity of each clone as follows. 



Fb{iP) = Tr(V^,^®VB® Ib^), 
Fb(V') = Tv{^l^®tB®TpES), 



(8) 



where in labels the input and -0 = is a short hand 

notation for a density matrix of a pure state. We are usu- 
ally interested in the average performance of the cloning 
machine, which can be quantified by the mean fidelities. 



Fb = I FB{ij)d^J, Fe 
lip 



FE{^)d^, (9) 



where the measure dip determines the kind of the cloning 
machines we are dealing with. Universal cloning ma- 
chines correspond to choosing dip to be the invariant mea- 
sure on the factor space SU{d) / SU [d— 1) induced by the 
Haar measure on the group SU{d). The fidelities ^ are 
linear functions of the operator S*, 

Fb = Tr[5i?s], Fe = Tr[SRE\, (10) 
where the positive semidefinite operators Rj are given by 



Rb = / ipt^^ipB^^Edtp, 
Jtp 



Re = / ij-n(^tB(E)ipEdip. 
J if) 

(11) 
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In case of universal cloning, the integral over d^p can be 
easily calculated with the help of Schur's lemma, and we 
get, for instance, 



■0in ® Ipsdlp 



d{d + l) 
1 

d{d + l) 



[li: 



1/ 



in,_BJ 



Here, n"*" denotes a projector onto symmetric subspace 
of two qudits, d{d + l)/2 is the dimension of this sub- 
space, and Tin stands for transposition with respect to 
the subsystem in. 

The optimal symmetric cloning machine S should max- 
imize the average of mean fidelities Fb and Fe [S^I , 



F^^{Fb+Fe)^Tt[SRI 



(12) 



where R = {Rb + Re)/^. The maximum achievable F is 
upper bounded by the maximum eigenvalue r^ax of the 
operator R. Taking into account the trace-preservation 
condition ©, we have 



F < dr„ 



(13) 



In the case of the universal and phase-covariant 1 — > 2 
cloning machines considered in the present paper this 
bound is saturated if we use an ancilla as we shall see 
below. 

We have to calculate the eigenvalues of an operator 



R^ 



1 



2d{d+l 



■(21 



inBE 



in.B 



1/ 



Is), 
(14) 

Due to the high symmetry, the operator R has only there 
different eigenvalues. One eigenvalue reads l/{d{d+ 1)) 
and is d^ — 2d-iold degenerate. The other two eigen- 
values are each d-fold degenerate and the corresponding 
eigenstates lie in the 2d-dimensional subspace spanned by 
|$+)in,B|fc)£; and |$+)i„,£;|fc)s, with fc = l,...,d The 
d eigenstates corresponding to the maximum eigenvalue 
read, 



■,k) 



2(d+ 1) 



mB\^+)in,E+\k)E\^+)in,B), 



(15) 

where k — 1, . . . , d. It is clear that the support of any 
admissible optimal cloning CP map S must be the d- 
dimensional space spanned by the eigenstates |rmax;fc)- 
This will be exploited in what follows to prove that it is 
not possible to implement the cloning transformation in 
an economic way, i.e. without an ancilla, just by apply- 
ing (randomly, with probability pi) a two-qudit unitary 
transformation Ui to the original state and a blank copy. 

If this convex mixture of the unitaries implements opti- 
mal cloning transformation which maximizes the fidelity 
F, then, by convexity, each unitary Ui is optimal in a 
sense that it yields the maximal mean fidelity. Consider 



one such unitary U. The corresponding operator Su rep- 
resents a pure state, since Su is obtained by applying U 
to a pure state | <&"'"). The question is thus whether there 
exists a state 



d 

\Su) = ^Cfe|r„ 
fc=i 



(16) 



such that Su ~ \Su){Su\ satisfies the trace-preservation 
condition 10. After a simple algebra, the condition 
Ttbe[Su] = lin turns out to be equivalent to 



fe=l 



= 1. 



(17) 



This condition is equivalent to the requirement that the 
rank-one projector |c*)(c*| is proportional to the identity 
operator, which is clearly impossible for any dimension 
d> 2. This concludes our proof that the universal 1^2 
economical cloning is impossible. 



III. PHASE-COVARIANT CLONING 
MACHINES 

Let us now investigate the possibility of the economi- 
cal implementation of phase-covariant cloning machines 
which clone equally well all balanced superpositions of 
computational basis states. 



1 

Vd 



We will proceed similarly as before and first determine 
the operators R^ and R^, where the superscript pc in- 
dicates states and operators related to phase-covariant 
cloning. The integration in Eq. 1)11(1 is over the d phases 
, and we have to evaluate the integral 



7 = 1 



(g) tpl 



l^J2{\jj){jj\)in,B- 



d2 



J = l 

In order to determine the subspace that is the support of 
all possible optimal cloning transformations S^'^, we have 
to determine the maximum eigenvalue of the operator 
RP'^ — (^R^ + R^e)/'^ corresponding eigenstates. 

We have 



RP' 



1 

rf2 



1/ 



1; 



2^ V<fin,B®liJ + *rn,E®ls 



1 

E ii\jj)ijj\)in,B l£ + {\jj){jj\)in,E ® Is] • 

(18) 
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Taking into account the symmetry properties of the op- 
erator RP'^, we can make an ansatz for the eigenstates of 
RP'^ which correspond to the maximum eigenvalue, 



= a(|$+)i„,s|A:)i3 + |$+>in.B|fc)B)+/3|fcfcfc) 
where k = 1, . . . ,d, and 



Vd 



{d + 2+ ^/<P■ +'id~A). 



in, BE, 

(19) 



(20) 



One can easily verify that IrJJfjj^; k) is indeed an eigen- 
state of if the condition H2()|l is satisfied. However, it 
is much more difficult to prove that it is the eigenstate 
with highest eigenvalue and that the d states H19|l are the 
only eigenstates with this maximum eigenvalue. While 
we have not been able to prove this analytically for arbi- 
trary d, we have checked numerically that this is indeed 
the case for d — 2,3, ... ,7 and we conjecture that this 
holds for any d. 

We can now prove that for d > 2 it is not possible 
to design an economical phase-covariant cloning machine 
which does not require an ancilla. If such a machine 
would exist, then there would be a state 



(21) 



k=l 



which would satisfy the trace-preservation condition 10 . 
On inserting (|19|) into (|21|l we obtain 

TTBEiismsn) = 2d'i^|c,pi-i-7^icfenfc)(fci 



where 



7 = r + 



,2 4q!/3 2a^ 



(22) 



Vd 



We have to distinguish two cases. If 7 = then the trace- 
preservation condition © can be satisfied by setting Ck — 
if k ^ I and c; = \fdj2 for some Z S {1, . . . , d}. From 
7 = we obtain a/ j3 — — \/d(4 ± 2\/2)/A. By comparing 
this expression with Eq. I|20|l we obtain an equation for 
d which has only one positive integer solution d = 2. In 
this particular case, the pure state Irgf^xi ^) describes the 
symmetric Niu-Griffiths phase-covariant cloning machine 
for qubits ^13,] and we have, in accordance with Eas.. Hll5|l . 



=|0)in|00)BiJ + ^|l)i„(|01) + |10)) 



BE- 



For d > 2 it holds that 7 7^ and the trace-preservation 
condition thus implies c^c* — CSjk, where C > is 
some constant. It is clear that this latter constraint 



does not admit any solution, hence we conclude that for 
d > 2 the economical phase-covariant cloning machine 
does not exist. Strictly speaking, our proof holds only 
for d — 3, . . . , 7 where we numerically verified that the 
eigenstates (I19|) are the only ones corresponding to the 
maximal eigenvalue of i?^*^, however, we expect that it 
holds for any d > 2. 



IV. SUBOPTIMAL ECONOMICAL 
PHASE-COVARIANT CLONING MACHINES 

Since the optimal phase-covariant cloning cannot be re- 
alized without an ancilla, we can ask what is the best eco- 
nomical approximation to the optimal doner, i.e., which 
unitary operation on the Hilbert space of two qudits, an 
input and a blank copy, achieves the maximum cloning 
fidelity. In our formalism, the unitary operation is rep- 
resented by a rank one operator Su — \Su){Su\ which 
satisfies Tr^B[|S't/)(S';7|] — tin- The optimal U can be 
easily determined if we impose some natural constraints 
on the cloning transformation. First of all, we require 
that it should be invariant with respect to swapping 
the two clones A and B, which implies that the output 
Hilbert space of Su should be the symmetric subspace 
of the two qudits, spanned by the states defined as 

|fc/+) = (|fc/) + \lk))/V2, k^l, and \kk+) = \kk). The 
second condition is that the cloning should be phase co- 
variant, i.e. the map Sjj should be invariant with respect 
to an arbitrary phase shift applied to the input qubit, 
followed by the inverse phase shifts on the two clones. 
Mathematically, this condition can be expressed as 

[VM ® 1^(0) ® V^mSu) = e^'^lSu), (23) 
where (j) is some overall phase factor, 

d 



V{<l>)=J2e^^-\k){k\, 



fe=i 



and the phases (f)k can be arbitrary. In order to satisfy 
the condition 123|l . the state \Su) must have one of the 
following forms 

\Su) = \k)in\lm'^)BE, k^ly^m, 

\Su) = \k)in\ll + )BE, k^l, 
d 

\su) - Y.'^\^y^^\^^^)BE- 

k=l 

It is clear that the trace preservation condition can be 
satisfied only by the third option, provided that Sk = 
giSfc^ The fidelity of the clones produced by this map is 
given by 
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and is maximized when 9k = O, k = 1, . . . , d.The optimal 
economical phase-covariant cloning transformation which 
is invariant with respect to the swapping of the two clones 
and is also phase covariant can be thus expressed as 

\k)^\kl+), 

where I G {1, . . . , d,} is arbitrary, and the corresponding 
fidelity reads 



V. FOURIER-COVARIANT CLONING 
MACHINES 

Although it is not always easy to prove analytically or 
numerically that certain cloning machines optimize given 
quantities (like Bob and Eve's fidelities), an educated 
guess is often possible. For instance, one can show that 
the overwhelming majority of optimal 1 to 2 cloning ma- 
chines that can be found in the literature obeys 31] the 
ansatz given in Refs. [sJIs^. According to this ansatz, 
the cloning transformation is represented by a pure state 
in a dimensional space spanned by the qudits conven- 
tionally labeled by A, B, E and M where A represent 
Alice's qudit and is formally equivalent to the label in 
introduced in the previous section, B and E represent 
Bob's and Eve's qudits as before, while Af represents an 
external ancilla. Moreover, the cloning state is assumed 
to be biorthogonal in the Bell bases, where the d? qudit 
Bell states are defined as follows: 

|Bm,„)i,2 = ^^7'"|fc)i|A: + m)2 (24) 

where m,n Cz {0, 1, d — 1}, 7 is the d-th root of unity, 
and \j)i(2) represents a state of the qudit system 1 (2) 
chosen in the computational basis. They are maximally 
entangled states and form an orthonormal basis of the 
d^-dimensional Hilbert space of qudits 1 and 2. Because 
the cloning state is biorthogonal in the Bell bases, it can 
be expressed as follows: 

,n) I ^m.— n)E,M (25) 

?n,n— 

Here a,„_„ is a (normalized) d x d matrix. The spec- 
ification of the d^ amplitudes am,n defines the cloning 
transformation. We now give several examples. 

The optimal universal (generally asymmetric) cloning 
machine is defined by the following amplitude matrix, 

flm.n = XlSm,oSn.O + X3 (26) 

The optimal symmetric universal d-dimensional doner 
(the one for which Eve's fidelity is maximal, under the 
constraint that Bob's fidelity is equal to Eve's fidelity) is 



obtained by choosing x\= x\ = d/[2{d+\)]. It copies all 
states with the same fidelity, and we recover the standard 
formula for the fidelity of universal doners Is^ IsrL Is^ 
F= (3 + d)/[2(l + d)]. 

The qubit phase covariant doner copies equally well 
two mutually unbiased qubit bases (maximally-conjugate 
or mutually unbiased bases are such that any basis state 
in one basis has equal squared amplitudes when expressed 
in any other basis). As far as we presently know, the 
most dangerous attack on the BB84 |^ and Ekert's |23| 
protocols requires Eve to make use of such a doner. It 
possesses two interesting generalizations in higher dimen- 
sion: (a) the phase-covariant doner and (b) the Fourier- 
covariant doner. 

(a) The phase-covariant doner has already been de- 
fined in the previous section; it clones equally well all 
balanced superpositions of computational basis states, 
\ip) = ^ X]^=i s*"*^ li)- The asymmetric phase-covariant 
cloning machine is described (for arbitrary dimension) in 
Ref. [131 (and the symmetric one in JJJ). It is defined 
by the following amplitude matrix: 

= Xi6m,o5nfl + X26m,Q + 2:^3 (27) 

where xi, X2 and ^3 are real positive parameters. It 
constitutes the most dangerous currently known attack 
on c?-dimensional generalizations of Ekert's protocol. 

(b) The Fourier-covariant doner clones equally well 
two mutually unbiased bases that are discrete Fourier 
transforms of each other It constitutes the most 
dangerous attack on d-dimensional generalizations of the 
BB84 protocol. The Fourier doner is characterized by 
the following amplitude matrix , 

»m,n = XiSm.oSnfi + X2{5m.,a + 6nfi) + 2^3, (28) 

where xi, X2 and x^ are real positive parameters. 

It is legitimate to ask whether or not an economic re- 
alization of such an optimal cloning machine is possible, 
so to say whether it is possible to reach the same fidelity 
without making use of the ancilla. Concretely, this means 
that it is possible to find Zmax probabilities pi and ^max 
unitary transformations Ug^ that act on the qudits B 
and E only such that: 

SABE = Tn.I^7'B,E,M^ E PI'^\b,E, (29) 

;=i...;,„ax 

where ^ ~ |*)(*| and $ = are short-hand nota- 

tions for density matrices of pure states, and 

Wa.b.e = ^ E \k)AU'BE\k)B\i^G)E. (30) 

As a consequence of the convexity of the average fidelity 
of cloning, if the CP map Sabe represent an optimal 
cloning transformation then each unitary transformation 
$^4 B B is also optimal in a sense that it maximizes the 
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average cloning fidelity. The support of the CP map S as- 
sociated with the cloning machines that fulfill the ansatz 
(|^ is spanned by the d states 

d-l 

\rp) =M (p| ^ ajn,n\Bm,7i) A,B\Bm-n) E ,M , (31) 
m,n— 

where p G {0, 1, ...,d — 1}. In what follows we assume 
that the states are eigenstates with maximum eigen- 
value Tinax of an operator R which appears in the for- 
mula for the cloning fidelity, F — Ti[RSabe]- Moreover, 
we assume that the states \rp) are the complete set of 
eigenstates with the eigenvalue Tmax- Our results ob- 
tained in the previous sections reveal that this is true for 
a symmetric universal cloning machine for any d and for 
phase covariant cloning machine for d = 2, ... ,7. Here 
we conjecture that this holds for phase covariant cloning 
machine and for the Fourier doner for arbitrary d. 

If economical optimal cloning is possible, we must be 
able to construct the pure states I^Ya b e which appear 
in Eqs. (|29|l and H30() as linear combinations of the states 
\rp). This means that there must exist d/max amplitudes 

a'j, (with J2k=o lo^fcP = 1) s^d^ that 

KE\k)B\iJo)E^ 4+™a™,„7"('=-J')|/c + m)s|j)i5, 

m,n j'— 

(32) 

for ^ = 1, . . . , ^inax- The constraints H32|l are a necessary 
condition for the existence of economical cloning, when- 
ever the support of the admissible CP maps S'' associated 
to the economical cloning transformations is spanned 
by the d states \rp). 

Let us assume that the optimal cloning state is given 
by Eq. (^5)1 with the amplitude matrix (^5)1 , this includes 
the whole class of symmetric and asymmetric universal 
and Fourier-covariant cloning machines. If an economical 
realization of such doners exists, then there must exist d 
amplitudes and a unitary transformation Ube which 
satisfy Eq. H32() . On inserting the explicit formula H28() 
for the amplitude matrix into Eq. (|32|l we obtain, 

UBE\k)B\lpo)E = ^ am,+j[xiS,n,a + dxsSj^k 
j,m—0 

+X2idSrn,oSj,k + l)]|"l + k)B\j)E- (33) 

Unitarity (or equivalently trace preservation lO) imposes 
the following condition: 

B{k'\E{MUiE\UBE\k)B\i'a)E - Sk,k' (34) 

Taking fc = fc' in Eqs. and we get after some 
algebra 

\0ij\'^fd{xi,X2,X3) + \ak\'^gd{xi,X2,X3) = 1, Vfc, 

(35) 



where fd and gd are second order polynomials in Xj, 

fd — x\ + dx\ + d^x\ + 2xiX2 + 2dx2Xz 

gd = [d^ + 2d)x\ + 2dxiX2 + 2dxiX3 + 2d^X2X3. 

(36) 

If we now consider the case fc 7^ fc' in Eq. H34|l we obtain 

{dx\ + 2xiX2 + 2dx2X3) ^ aja*^^._,^, 

j 

+dxl{aka2k-k' + a2k'~kOil,) -f 2dxiX3ak'al = 

(37) 

Normalization of the cloning state (|25|) imposes that 
fd + gd/d = 1. In virtue of Eq. either \ak\'^ = 

V/c or gd = 0. The latter constraint is neither satisfied 
by the universal nor by the Fourier-covariant doners so 
that in order that such doners admit an economical re- 
alization, |afcp = 1/d and the norms of all the d a priori 
unknown parameters ak must be equal. In order to en- 
sure unitarity, it is still necessary to fulfill the condition 
(|37|l . It is worth noting that in H37|) appear only prod- 
ucts of a* and aj the indices of which differ by the same 
quantity i — j = k — k' . Hence, if we make the sub- 
stitution k' = fc — m in Eq. (|37l) and then sum over 
m = 0, • • • , d — 1, we get the following constraint, 

5d(a;i, a;2, xa) ^ aja*+,„ = 0, m 7^ 0. 
j 

Since gd = is never satisfied by the optimal uni- 
versal and/or Fourier-covariant doners, we find that 
J2j oijOi*j+m = 0, TO 7^ 0. As a consequence, the satis- 
faction of the condition (|37|l also implies 

x1{aka*2k-k' + oi2k'-kal,) + 2xiX3,ak,al = 0. (38) 

In the case of the universal doner, a;2 = and X1X3 7^ 
and it is clear that no solution exists for the system for 
any d> 2. 

When the doner is the optimal Fourier-covariant 
doner, it can be shown that the ancilla does not bring 
extra information about the state under copy, which is 
expressed by the relation X2 — xix^. The amplitudes aj 
must then obey the relations 

(39) 

We shall show that this system of equations admits a 
solution only in dimension d = 2. This solution corre- 
sponds to the (qubit) phase covariant doner and, in the 
symmetric case, to the symmetric Niu-Griffiths econom- 
ical realization already mentioned in a previous section 
(see also Ref. H^). The asymmetric economical realiza- 
tion was studied in detail in the reference |0| . 

Since all the amplitudes aj have the same norm, the 
triangular inequality together with Eq. (|39() implies that 

a/cafe+m = ak-2rnOll^ni = -ak-ma*k- (40) 
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It is convenient to consider normalized amplitudes aj = 
\fdaj^ \oij\ = 1. Taking m = 1 we obtain from Eq. 
(|in|l the recurrence formula cifc+i = —c?^5t\_-y. Without 
loss of generality, we can assume ao = 1 and express 
all cij in terms of ai as follows: a^n = (— l)"Q!f" and 
'52n+i = ( — l)"ai"'''^. Substituting these expressions in 
the constraint X]f=o^ '^i'^j+m ^ ^ with to = 2 leads to 
— 0, which contradicts the fact that |ai| — 1. It is 
only in dimension 2 that the contradiction can be avoided 
because m = 2 = modulo d in dimension 2. 

The treatment of the phase-covariant doner (symmet- 
ric and asymmetric as well) presents many similarities 
with the treatment of the symmetric phase-covariant 
doner already discussed in the Section II, excepted that 
the parametrization is different: when the constraints 12 71 
and 1221 are satisfied, it is easy to derive the following 
system of equations: 

2dxxx:ia*_^,au = 0; Vfc 7^ fc' (41) 

The solution of the second constraint is a^. = (5^.^;. 
Inserting in the first constraint, we get the equation 
x\ -h (^^x\ = 1 which is fulfilled in dimension d = 2 only, 
in virtue of the identity x^ = {xi+X2 + X3){x2+X3), and 
of the normalization of the cloning state xl+d'^x^ + dx2 + 
2xiX2 + 2x1X3 -\-2d.x2X3 = 1, in which case we recover the 
Fourier-covariant doner and its Niu-Griffiths economical 
realization already mentioned in the section 2. Note that 
our proof constitutes a strong evidence of the impossi- 
bility of economical phase-covariant cloning in any finite 
dimension different from 2, in agreement with the strict 
proof of the section IIIB for dimensions 3 to 7. Note also 
that the 2 dimensional realization of the phase-covariant 
doner (I27|l differs, in our parametrization, from the 2 di- 
mensional Fourier covariant doner H28|) . but they can be 
shown to be equivalent up to a change of basis and to a 
relabeling of the x parameters. 

VI. CONCLUSIONS 

In this paper, we have focused on one-to-two cloning 
machines in arbitrary dimensions, and have investigated 
the connections between the doners with and without 
ancillas. We have established a series of no-go theorems 
for economical cloning, some of them being firm (univer- 
sal doner), some others relying on an ansatz which was 
only tested numerically (phase-covariant and Fourier- 
covariant doners). Note that, in our approach, the figure 
of merit is the cloning fidelity, but it seems that the don- 
ers that optimize Eve's information also fulfill the ansatz 
(|25|l . In this case, the CP map approach is not very well 
adapted because of the non-linearity of the information 
measure. Nevertheless, we were able to establish the va- 
lidity of the condition (|29|l in an independent manner, 
under the assumption of optimality of the ansatz only. 



Our results strongly suggest that the Niu-Griffiths eco- 
nomical phase-covariant cloning machine for qubits is 
quite unique among the optimal 1^2 cloning machines. 
This conclusion is of importance in connection with the 
security of quantum cryptographic protocols because it 
shows that the realization of cloning attacks on quantum 
cryptographic protocols that exploit higher-dimensional 
Hilbert spaces would require the mastering and control 
of three-qudit transformations, which constitutes a seri- 
ous technological challenge. Another possibility would be 
of course to implement a sub-optimal economical phase- 
covariant doner, as presented in Section IV, but the re- 
sulting attack would be weaker. 

To be complete, it is worth noting that in the limit 
of an infinite dimension, the optimal phase-covariant, 
Fourier-covariant, and universal doners tend all to a fi- 
delity of 1/2, for which an economical realization exists: 
the original qudit is replaced by noise with probability 
1/2 and directed to Eve, or it is resent to Bob without 
disturbance while Eve gets noise. In this rather triv- 
ial limit, economical cloning is always possible, and ex- 
tremely cheap! 

In a future work, it would be interesting to study the 
possibility of economical one-to-N cloning, where it seems 
that the limitations are less drastic than in the one-to- 
two case. For instance the one-to-three and one-to-N 
doners studied in [stL IssL l39| also admit an economical 
realization. 

Note added: A related work on economical quantum 
cloning has been reported independently by the QUIT 
group in Pavia [s^, following discussions we had during 
a visit of the QUIT group in January 2004 which also led 
to the present paper. 
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